Sign inSign up
MediaWiki

dhi.io/mediawiki

MediaWiki 1.46 (php-fpm, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.0-debian-php-fpm-fips-dev, 1.46.0-debian13-php-fpm-fips-dev, 1.46.0-php-fpm-fips-dev

Index digest:

sha256:41effa8f47fd96828a8dfafdc0a67047beeaadd080589e81689b2329006bd8ab

Manifest digest:

sha256:4be0502f5450b0df429ccbea4e2e1fbf06314539ac9660a1acd69360c7085966

Size

158.21 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
2
19
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mediawiki@sha256:65ccfdd9c237b82df75e8c1d77cab33ead147c4c7390719fe20b5ae404a813be
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mediawiki@sha256:96ef2dfe06186ee870a906c1f80924e80b40b3ddbd1c6d53d853f8670434354d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mediawiki@sha256:06bdc6dc6192bd1fd2fd18b75e07c65a80854c0f7f24ce87af8b94215c71744b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mediawiki@sha256:000794076a747d1169ac31ca23b45f0e8dbba7f105ebf474ffd59586876a8eb3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mediawiki@sha256:0bffe87e898592f4294acbb732410926804ace18d2e73dd3db466d7d4aefdf9b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mediawiki@sha256:570c69ca2dc6a0ab07cfbf9270544add5c0ebdf6c58be829fc82772b07b347aa
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mediawiki@sha256:2870fb3cd188327ffc7accf0b24170fafabb1ac58394b2ac65cbd91ed46e1f8e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mediawiki@sha256:023810c083bbd9eae7b1e6a162b35eade7848de80d7bef65b3f78c063a8988cd
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mediawiki@sha256:e7e62fab03eadbcd83a4775bcb48673d769e40ed71d225ab5bc71ca6144b5143
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mediawiki@sha256:32da7dfee611639c01ca29bac4507a920048b6c4dc95c9bff476a8f37ffef99a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mediawiki@sha256:c29cbde77f02714d4105b29e8663fdaf156fca8e1749f87c88b98e57998e1aa1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mediawiki@sha256:d386725ad6431aa432c26ff8edb5c00d720d56eb7358ada03cccf3a18adc6d65
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mediawiki@sha256:93545fc1992d588aa979b8a2a7a091d478de917cf10378f477335e8b82a0be4b
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mediawiki@sha256:6dc36a90d47c431b375b738905b66a7010211215ff5166ce4f6e91e7ad89cab6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mediawiki@sha256:6eada00c61eddfc33d8588b4cf718344dfe6475c91d4911b1191b82c6ef8a407
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mediawiki@sha256:f8da9319c73ed9e618930da73858aff21cabd50879fec80a82d282c9bd9cfb35
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mediawiki@sha256:cf064bfe2fe5a37acc87a3a5eaa4b957334c86cef1a62ce56440de601778c24c